Foundry Networks Switch and Router Installation And Configuration Manual page 1037

NOTE: Unlike other filters, the default action for AppleTalk filters does not change from permit to deny when you
create a filter. To permit only specific zones and deny all others, create permit filters for the zones you want to
permit, then use the following command to create a deny filter for all other zones: appletalk deny zone
additional-zones.
Scope
You configure and apply AppleTalk zone filters on individual ports.
Syntax
Use the following CLI commands or Web management interface panels to configure AppleTalk zone filters.
CLI syntax
BigIron(config-if-1/1)# appletalk permit zone <string>
BigIron(config-if-1/1)# appletalk deny zone <string> | additional-zones
rtmp-filtering | no-rtmp-filtering
NOTE: If you use the rtmp-filtering | no-rtmp-filtering parameter, you are configuring an AppleTalk network
filter. See the following section.
Appletalk Network Filters
Routing Table Maintenance Protocol (RTMP) filtering enhances a zone filter by hiding the cable ranges inside the
zones used by other routers. The denied network numbers of the filtered zone will be removed from the RTMP
packets.
The Macintosh chooser uses ZIP GetZoneList request to compile a list of zones available, so if the zone is not
there the Macintosh computer cannot access it. RTMP filtering is useful for preventing downstream and adjacent
routers from responding to GetZoneList requests that could give access to the zones you want to filter. All routers
on the same segment should be configured with the same filters. You can prevent local Macintosh computers
from accessing a zone but still allow the downstream routers with Macintosh computers attached to other
networks to access those zones. To do so, do not use the RTMP filtering option with the zone filter.
When you configure an AppleTalk zone filter to also filter network information, the Foundry device removes route
information for the networks in the specified zone before sending the RTMP packet out on the port.
Actions
AppleTalk network filters remove information about the networks in the denied zones before sending RTMP
packets to Macintosh computers.
NOTE: AppleTalk network filters only deny information; they do not permit information.
Scope
You configure and apply AppleTalk network filters on individual ports.
Syntax
Use the following CLI commands or Web management interface panels to configure AppleTalk zone filters.
CLI syntax
BigIron(config-if-1/1)# appletalk permit zone <string>
BigIron(config-if-1/1)# appletalk deny zone <string> | additional-zones
rtmp-filtering | no-rtmp-filtering
December 2000
Table C.20: AppleTalk Zone Filters
Table C.21: AppleTalk Zone Filters
Policies and Filters
Web management links
Configure->AppleTalk->Zone Filter
Configure->AppleTalk->Additional
Zone Filter
Web management links
Configure->AppleTalk->Zone Filter
Configure->AppleTalk->Additional
Zone Filter
C - 33